CVE-2026-68118

The CVE-2026-68118 entry concerns the Linux kernel TCP stack, specifically the SYN-RECEIVED path in tcp_check_req(). A non-exact in-window RST could be accepted without matching SEG.SEQ to RCV.NXT, potentially removing the request instead of triggering a challenge ACK. The fix enforces RFC 9293/5...